[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #27008 [Internal Services/Service - deb.tpo]: Remove ooniprobe and dependencies

#27008: Remove ooniprobe and dependencies
-------------------------------------------------+-------------------------
 Reporter:  irl                                  |          Owner:  irl
     Type:  task                                 |         Status:
                                                 |  accepted
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Service - deb.tpo  |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:                                       |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by irl):

 If users were to add the new deb.ooni.io repository, these packages would
 have a higher version number. We would ensure that those packages can
 allow safe upgrade from the packages that were on deb.torproject.org.

 I feel that automatically changing user's APT sources is a little too
 sneaky. Automatically adding new GPG keys to secure APT that effectively
 give another group root access to the machine could well be considered a
 breach of trust by some users.

 https://wiki.debian.org/piuparts is designed to test package upgrades
 don't break user's machines.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27008#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs